nft-craft-ten[.]vercel[.]app

PhishDestroy identifies nft-craft-ten.vercel.app as an active crypto drainer campaign impersonating NFT crafting tools. The domain mimics legitimate NFT minting platforms to deceive users into connecting wallets and draining cryptocurrency assets. Threat actors leverage Vercel’s hosting infrastructure to host fraudulent pages, exploiting trust in reputable services to bypass security filters. This campaign represents a direct financial risk to cryptocurrency holders and NFT collectors, with active propagation through social media and phishing channels.

This domain resolves to IP address 216.198.79.131 and uses a Google Trust Services SSL certificate to appear legitimate. VirusTotal currently reports 0 detections out of 95 security engines, indicating undetected malicious activity. The site is hosted on Vercel Inc., a legitimate platform exploited for malicious purposes. As of the latest scan, the domain remains active and continues to serve malicious content designed to trick users into signing malicious wallet transactions. No blocklist entries have been recorded yet, increasing the risk of exposure to unsuspecting victims.

Users should immediately block access to nft-craft-ten.vercel.app and avoid any interaction with the site or its associated links. For crypto drainer threats, disable wallet connections on untrusted websites and verify URLs through official project channels. If funds have been compromised, report the incident to relevant blockchain explorers and revoke any unauthorized wallet permissions promptly. Monitor transaction history for unauthorized transfers and consider using hardware wallets with transaction simulation features to detect malicious payloads before signing.